Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/2fdd56-ba2c-46fb-9882-9b257f4fea8d/1/LbRVy-XpWNXcrpnOKwAEPTjKf1g.roa
File: LbRVy-XpWNXcrpnOKwAEPTjKf1g.roa (raw, json)
Hash identifier: Or2JduS1buYElXqlLsu/yVBBU6EY5BBgTfIRfgbH0O0=
Subject key identifier: 2D:B4:55:CB:E5:E9:58:D5:DC:AE:99:CE:2B:00:04:3D:38:CA:7F:58
Certificate issuer: /CN=77bc534ba44e9d3cba2f2446d4a3dd6eea9b8f61
Certificate serial: F0C98C
Authority key identifier: 77:BC:53:4B:A4:4E:9D:3C:BA:2F:24:46:D4:A3:DD:6E:EA:9B:8F:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d7xTS6ROnTy6LyRG1KPdbuqbj2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/2fdd56-ba2c-46fb-9882-9b257f4fea8d/1/LbRVy-XpWNXcrpnOKwAEPTjKf1g.roa
Signing time: Sat 01 Jan 2022 10:54:27 +0000
ROA not before: Sat 01 Jan 2022 10:54:27 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212217
IP address blocks: 46.253.129.0/24 maxlen: 24
2a11:60c0:1::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15780236 (0xf0c98c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77bc534ba44e9d3cba2f2446d4a3dd6eea9b8f61
Validity
Not Before: Jan 1 10:54:27 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2db455cbe5e958d5dcae99ce2b00043d38ca7f58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:fc:2f:3c:44:8a:60:66:e5:16:61:05:da:db:
0e:dd:b2:f5:e6:22:33:dc:91:fa:ae:be:7c:bd:33:
12:a7:f5:75:99:b1:c6:30:b4:b1:82:ab:d8:b4:76:
c1:d0:bc:14:a9:71:8c:08:66:f1:bf:b8:5c:95:b1:
52:a6:4f:c6:0d:e1:7c:84:0e:61:df:32:99:b4:5c:
6f:20:02:84:45:4d:5e:d8:a5:3d:27:5d:42:b2:16:
a8:31:3f:1d:1e:9f:b4:5f:e5:cb:71:ff:87:20:c4:
c6:49:26:8f:f7:8d:85:fc:36:a3:1b:bb:f6:c6:96:
f7:8e:11:fe:0f:1b:6c:03:5d:3b:e0:78:e1:b2:f1:
72:74:49:e9:9f:b3:0f:00:6b:0b:46:61:18:e7:27:
20:3e:66:b5:b8:52:6b:97:4c:14:05:57:96:02:95:
90:e1:de:91:52:b8:9e:a4:21:3d:d8:19:16:78:df:
cf:fb:13:98:e0:ef:12:b7:07:74:c7:53:7d:f5:77:
fd:19:33:ea:6f:58:f9:72:39:e8:de:57:35:91:d7:
dd:d6:1b:c4:35:31:24:f6:a3:6f:f9:ac:ad:5c:8a:
6d:30:3f:20:f6:a7:eb:44:96:bf:16:93:0c:4c:bb:
33:46:0d:20:db:37:28:90:3a:98:b4:5b:88:a6:52:
d7:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:B4:55:CB:E5:E9:58:D5:DC:AE:99:CE:2B:00:04:3D:38:CA:7F:58
X509v3 Authority Key Identifier:
keyid:77:BC:53:4B:A4:4E:9D:3C:BA:2F:24:46:D4:A3:DD:6E:EA:9B:8F:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7xTS6ROnTy6LyRG1KPdbuqbj2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/2fdd56-ba2c-46fb-9882-9b257f4fea8d/1/LbRVy-XpWNXcrpnOKwAEPTjKf1g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/2fdd56-ba2c-46fb-9882-9b257f4fea8d/1/d7xTS6ROnTy6LyRG1KPdbuqbj2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.253.129.0/24
IPv6:
2a11:60c0:1::/48
Signature Algorithm: sha256WithRSAEncryption
7f:87:65:73:be:69:f0:a8:95:c9:22:8e:c5:04:c9:bd:82:fa:
0d:d9:8b:0e:40:fa:82:08:e8:09:59:d9:02:fe:fd:12:d9:cb:
c8:07:44:a1:74:a6:1e:b4:5a:8a:52:a0:cc:c6:4f:d4:fa:ed:
2f:43:d0:f8:cf:3d:9a:03:f2:4d:f5:c6:53:51:82:84:60:b2:
86:af:98:84:fa:3f:9a:10:98:31:de:81:a1:47:47:a0:5f:1f:
7d:94:27:47:84:40:6a:fb:84:43:8a:ed:2d:09:b7:89:69:7a:
64:61:6d:fd:81:5c:e2:fe:a8:a1:66:18:59:97:41:7e:f9:fc:
f6:5c:93:86:6a:bc:9d:80:9c:af:e4:dd:c5:36:74:e5:bf:fb:
64:7f:39:f4:fc:65:d3:ef:b9:7b:5a:1d:24:c1:7e:43:8b:0e:
c5:8f:c3:20:71:ad:59:d5:c7:fb:a9:25:99:c1:44:62:6f:35:
db:32:cf:cf:82:b3:a2:b3:93:73:49:b2:cb:1d:fb:1c:31:92:
fa:68:cc:45:9f:2a:92:bb:74:5f:90:5a:3f:1b:f1:df:61:6d:
78:e1:64:d6:d0:56:ad:87:09:26:5e:1a:25:53:dd:cf:f8:34:
15:73:fc:d0:ca:d9:34:a0:23:05:c9:94:ba:65:a5:b8:7e:58:
2e:eb:cc:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:21 2024 by rpki-client on console-fra.rpki-client.org